{"id":"CVE-2026-119025","aliases":[],"cve":{"records":[{"id":"CVE-2026-119025","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-29T11:19:44.165Z","published":"2026-10-29T11:24:18.723Z","modified":"2026-10-29T11:24:18.723Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-10-29T11:24:18.723Z"}],"references":[{"url":"https://github.com/sindresorhus/open/commit/274d70446bf38a7b7d50b214dd3962ef8ea9320d","tags":["patch"],"source":"VulnCheck"},{"url":"https://github.com/sindresorhus/open/releases/tag/v11.0.0","tags":["release-notes"],"source":"VulnCheck"},{"url":"https://github.com/sindresorhus/open/blob/v10.2.0/index.js#L189-L203","tags":["technical-description"],"source":"VulnCheck"},{"url":"https://github.com/sindresorhus/open/blob/v7.2.0/index.js#L60-L99","tags":["technical-description"],"source":"VulnCheck"},{"url":"https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-q978-78c7-phqw","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://github.com/anomalyco/opencode/pull/51414","tags":["patch","issue-tracking"],"source":"VulnCheck"},{"url":"https://github.com/anomalyco/opencode/commit/29f07e0c69ad8668e0e15b0eb54f2fcb342af98c","tags":["patch"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/open-7.2.0-before-11.0.0-os-command-injection-via-powershell-on-windows","tags":["third-party-advisory"],"source":"VulnCheck"}],"weaknesses":[{"id":"CWE-78","description":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","source":"VulnCheck"}],"applicability":[],"prioritization":[]},"title":"open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand.","score":7.7,"severity":"high","published":"2026-10-29T11:24:18.723Z","modified":"2026-10-29T11:24:18.723Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"sindresorhus","name":"open","platforms":[],"versions":[{"version":"7.2.0","status":"affected","lessThan":"11.0.0","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:npm/open","packageIdentity":{"ecosystem":"npm","name":"open"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-119025"},{"vendor":"modelcontextprotocol","name":"inspector","platforms":[],"versions":[{"version":"2.0.0","status":"affected","lessThan":"2.12.0","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:npm/%40modelcontextprotocol/inspector","packageIdentity":{"ecosystem":"npm","name":"@modelcontextprotocol/inspector"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-119025"},{"vendor":"anomalyco","name":"opencode","platforms":[],"versions":[{"version":"1.0.137","status":"affected","lessThan":"1.18.33","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:npm/opencode-ai","packageIdentity":{"ecosystem":"npm","name":"opencode-ai"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-119025"}],"remediation":[],"references":["https://github.com/sindresorhus/open/commit/274d70446bf38a7b7d50b214dd3962ef8ea9320d","https://github.com/sindresorhus/open/releases/tag/v11.0.0","https://github.com/sindresorhus/open/blob/v10.2.0/index.js#L189-L203","https://github.com/sindresorhus/open/blob/v7.2.0/index.js#L60-L99","https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-q978-78c7-phqw","https://github.com/anomalyco/opencode/pull/51414","https://github.com/anomalyco/opencode/commit/29f07e0c69ad8668e0e15b0eb54f2fcb342af98c","https://www.vulncheck.com/advisories/open-7.2.0-before-11.0.0-os-command-injection-via-powershell-on-windows"],"sources":[{"name":"CVE","id":"CVE-2026-119025","modified":"2026-10-29T11:24:18.723Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-119025"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":7.7},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","score":7.5}],"sourceAffected":[],"observedAt":"2026-10-29T14:37:41.847Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:10:32.801Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"open versions 7.2.0 before 11.0.0 contain an OS command injection vulnerability, allowing attackers to execute PowerShell code on Windows and WSL by supplying crafted URLs. Attackers can embed subexpressions in URLs, which execute when passed unescaped to powershell. This affects Windows and WSL.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:30:37.355Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-119025"}]}}